Sunday, 28 September, 2025
Google Project Zero Discovers ASLR Bypass via NSDictionary in Apple Devices
A researcher from Google Project Zero revealed a new method that bypasses Address Space Layout Randomization (ASLR) on Apple’s macOS and iOS without relying on memory corruption or timing side-channels. The exploit uses NSDictionary serialization/deserialization to leak memory addresses by tracking placement of entries in hash buckets, ultimately revealing the address of the NSNull singleton.
Read full story at Cybersecurity News